CVE catalog

CVE-2015-0295

qtbase-opensource-src: CVE-2015-0295

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
6.07% · Oct 25, 2026

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianqtbase-opensource-srcsid5.15.19+dfsg-6fixed
Debianqtbase-opensource-srcforky5.15.19+dfsg-5fixed
Debianqtbase-opensource-srctrixie5.15.15+dfsg-6+deb13u1fixed
Debianqtbase-opensource-srcbookworm5.15.8+dfsg-11+deb12u3fixed
Ubuntuqt4-x1114.044:4.8.4+dfsg-0ubuntu18vulnerable
Ubuntuqt4-x1114.044:4.8.4+dfsg-0ubuntu19vulnerable
Ubuntuqt4-x1114.044:4.8.4+dfsg-0ubuntu20vulnerable
Ubuntuqt4-x1114.044:4.8.4+dfsg-0ubuntu21vulnerable
Ubuntuqt4-x1114.044:4.8.4+dfsg-0ubuntu22vulnerable
Ubuntuqt4-x1114.044:4.8.5+git192-g085f851+dfsg-2ubuntu3vulnerable
Ubuntuqt4-x1114.044:4.8.5+git192-g085f851+dfsg-2ubuntu4vulnerable
Ubuntuqt4-x1114.044:4.8.5+git192-g085f851+dfsg-2ubuntu4.1fixed
Ubuntuqtbase-opensource-src14.045.0.2+dfsg1-7ubuntu11vulnerable
Ubuntuqtbase-opensource-src14.045.0.2+dfsg1-7ubuntu12vulnerable
Ubuntuqtbase-opensource-src14.045.0.2+dfsg1-7ubuntu13vulnerable
Ubuntuqtbase-opensource-src14.045.0.2+dfsg1-7ubuntu14vulnerable
Ubuntuqtbase-opensource-src14.045.0.2+dfsg1-7ubuntu15vulnerable
Ubuntuqtbase-opensource-src14.045.0.2+dfsg1-7ubuntu16vulnerable
Ubuntuqtbase-opensource-src14.045.0.2+dfsg1-7ubuntu17vulnerable
Ubuntuqtbase-opensource-src14.045.0.2+dfsg1-7ubuntu18vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu7vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu8vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu9vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu10vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu11vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu13vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu14vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu14.2vulnerable
Ubuntuqtbase-opensource-src14.045.2.1+dfsg-1ubuntu14.3fixed
Opensuselibqt5-qtbasetumbleweed5.7.0-2.2fixed
Suselibqt5-qtbaselinux enterprise desktop 125.3.1-4.4.2fixed
Suselibqt5-qtbaselinux enterprise software development kit 125.3.1-4.4.2fixed
Suselibqt5-qtbaselinux enterprise server 125.3.1-4.4.2fixed
Suselibqt5-qtbaselinux enterprise server for sap applications 125.3.1-4.4.2fixed
Suselibqt4linux enterprise desktop 124.8.6-4.2fixed
Suselibqt4-sql-pluginslinux enterprise desktop 124.8.6-4.1fixed
Suselibqt4linux enterprise software development kit 124.8.6-4.2fixed
Suselibqt4-devel-doclinux enterprise software development kit 124.8.6-4.6fixed
Suselibqt4-sql-pluginslinux enterprise software development kit 124.8.6-4.1fixed
Suselibqt4linux enterprise server 124.8.6-4.2fixed
Suselibqt4-devel-doclinux enterprise server 124.8.6-4.6fixed
Suselibqt4-sql-pluginslinux enterprise server 124.8.6-4.1fixed
Suselibqt4linux enterprise server for sap applications 124.8.6-4.2fixed
Suselibqt4-devel-doclinux enterprise server for sap applications 124.8.6-4.6fixed
Suselibqt4-sql-pluginslinux enterprise server for sap applications 124.8.6-4.1fixed
Suselibqt4linux enterprise workstation extension 124.8.6-4.2fixed
Suselibqt4-sql-pluginslinux enterprise workstation extension 124.8.6-4.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianqtbase-opensource-srcsourcesid5.3.2+dfsg-5not yet assignedNot reported[779580]
Debianqtbase-opensource-srcsourceforky5.3.2+dfsg-5not yet assignedNot reported[779580]
Debianqtbase-opensource-srcsourcetrixie5.3.2+dfsg-5not yet assignedNot reported[779580]
Debianqtbase-opensource-srcsourcebookworm5.3.2+dfsg-5not yet assignedNot reported[779580]
Ubuntuqt4-x11deb14.044:4.8.5+git192-g085f851+dfsg-2ubuntu4.1Not reportedUBUNTU-CVE-2015-0295Not reported
Ubuntuqtbase-opensource-srcdeb14.045.2.1+dfsg-1ubuntu14.3Not reportedUBUNTU-CVE-2015-0295Not reported
Opensuselibqt5-qtbaserpmtumbleweed5.7.0-2.2Not reportedOPENSUSE-SU-2024:10456-1Not reported
Suselibqt5-qtbaserpmlinux enterprise desktop 125.3.1-4.4.2Not reportedSUSE-SU-2015:1383-1Not reported
Suselibqt5-qtbaserpmlinux enterprise software development kit 125.3.1-4.4.2Not reportedSUSE-SU-2015:1383-1Not reported
Suselibqt5-qtbaserpmlinux enterprise server 125.3.1-4.4.2Not reportedSUSE-SU-2015:1383-1Not reported
Suselibqt5-qtbaserpmlinux enterprise server for sap applications 125.3.1-4.4.2Not reportedSUSE-SU-2015:1383-1Not reported
Suselibqt4rpmlinux enterprise desktop 124.8.6-4.2Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4-sql-pluginsrpmlinux enterprise desktop 124.8.6-4.1Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4rpmlinux enterprise software development kit 124.8.6-4.2Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4-devel-docrpmlinux enterprise software development kit 124.8.6-4.6Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4-sql-pluginsrpmlinux enterprise software development kit 124.8.6-4.1Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4rpmlinux enterprise server 124.8.6-4.2Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4-devel-docrpmlinux enterprise server 124.8.6-4.6Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4-sql-pluginsrpmlinux enterprise server 124.8.6-4.1Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4rpmlinux enterprise server for sap applications 124.8.6-4.2Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4-devel-docrpmlinux enterprise server for sap applications 124.8.6-4.6Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4-sql-pluginsrpmlinux enterprise server for sap applications 124.8.6-4.1Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4rpmlinux enterprise workstation extension 124.8.6-4.2Not reportedSUSE-SU-2015:1359-1Not reported
Suselibqt4-sql-pluginsrpmlinux enterprise workstation extension 124.8.6-4.1Not reportedSUSE-SU-2015:1359-1Not reported

[Debian bug #779580]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [libQt5Bootstrap-devel-static]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Bootstrap-devel-static-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Concurrent5]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Concurrent5-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Concurrent-devel]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Concurrent-devel-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Core5]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Core5-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Core-devel]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Core-devel-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Core-private-headers-devel]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · noarch · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5DBus5]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5DBus5-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5DBus-devel]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5DBus-devel-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5DBus-private-headers-devel]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · noarch · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Gui5]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Gui5-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Gui-devel]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Gui-devel-32bit]Unknown

    Source package: [libqt5-qtbase]

    Details (1)

    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.7.0-2.2

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]